Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
File: GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft (raw, json)
Hash identifier: FpVZrD8Pz/7ISQfbqufn6WWp4iPxXRI4ca6IGZBnYJI=
Subject key identifier: FF:A2:EE:4B:4E:46:4E:12:C9:B9:AD:CD:24:65:31:7A:2A:90:F0:54
Authority key identifier: 19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF
Certificate issuer: /CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf
Certificate serial: 019D9B511AE22D8E46E17FF3C2C9A53F0B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
Manifest number: 07A2
Signing time: Fri 17 Apr 2026 12:01:16 +0000
Manifest this update: Fri 17 Apr 2026 12:01:16 +0000
Manifest next update: Sat 18 Apr 2026 12:01:16 +0000
Files and hashes: 1: 0S1p6i0Cw3qVWxZGiLbWP8XnpU0.roa (hash: 4FhowhSJ5qi8dCHQSc2oLoPhWB0tu8x+SmhucQmQc60=)
2: GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl (hash: CdYvVg04e2/eerx0E9MEA2e1ivhVaqu8rQe2AH4nRcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:1a:e2:2d:8e:46:e1:7f:f3:c2:c9:a5:3f:0b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf
Validity
Not Before: Apr 17 12:01:16 2026 GMT
Not After : Apr 18 12:01:16 2026 GMT
Subject: CN=ffa2ee4b4e464e12c9b9adcd2465317a2a90f054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:88:c4:35:8b:a9:20:b8:f2:f8:b1:a7:bd:
a8:be:d4:97:04:be:d0:8a:3f:43:d0:c1:64:35:f3:
72:e2:24:1e:09:ee:0f:95:3c:65:8b:08:dd:1f:ac:
cf:e4:ab:e6:f1:e0:eb:00:1d:27:cb:4e:7b:5f:fc:
f7:6c:4b:69:22:39:78:e9:f5:84:a8:10:7c:92:6f:
0d:d7:e2:de:d6:74:c5:4a:96:e6:c3:b0:d7:da:71:
b0:7d:4a:ea:07:38:89:88:5f:75:fb:1f:80:a8:24:
80:20:0b:34:e8:b7:8a:d2:a5:67:c5:a6:90:42:37:
e0:1c:21:dc:5a:47:5d:93:cd:0f:5e:3e:4b:ad:4a:
28:5a:54:4d:fe:ae:c1:05:26:30:bd:b8:ed:72:65:
90:59:c5:aa:96:58:f2:92:99:ce:b4:61:38:83:c0:
e0:1f:ac:a5:48:ab:e2:ba:04:30:2d:df:af:05:76:
9e:ca:65:1d:fa:d5:2a:bb:8c:47:fd:1e:37:e8:b8:
8a:40:7e:a6:98:e5:09:5a:b5:56:ec:db:7b:7e:1b:
e3:85:ea:26:bf:7c:33:d8:9e:05:2b:8d:34:0b:40:
d9:02:29:7b:1c:84:82:15:a6:19:9c:68:96:3a:e4:
3e:6e:24:3e:d1:b6:f1:e1:d1:84:46:1c:ce:3e:e4:
7a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A2:EE:4B:4E:46:4E:12:C9:B9:AD:CD:24:65:31:7A:2A:90:F0:54
X509v3 Authority Key Identifier:
keyid:19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:59:1c:e1:4d:ce:46:30:8f:70:c6:8b:12:42:b8:04:5b:a0:
33:5f:61:43:3a:fe:0b:4c:76:bb:52:4f:f0:91:2b:3e:79:9c:
dd:d6:92:d0:a7:c3:f0:4a:f3:6b:3d:83:13:da:29:0b:6b:3b:
7c:e5:a0:10:e0:d9:76:17:fa:cb:9d:fd:d4:4d:b1:3c:11:30:
d8:a8:91:2b:15:78:af:c1:12:65:20:14:88:78:39:41:92:4b:
2d:3b:f5:ed:89:5e:92:ef:c6:4d:e4:08:8e:da:5f:26:47:0c:
b9:eb:2b:22:07:09:d1:cb:70:d0:ea:57:ef:f3:a7:b4:af:ee:
5f:e4:cd:98:a6:2b:6f:55:4a:75:a2:87:a9:a9:81:91:f8:20:
99:99:c2:48:23:af:db:b3:13:fe:19:fb:e3:f0:73:04:47:a9:
f3:5f:ae:9e:31:5d:79:5f:cb:1e:39:90:2a:32:f0:00:d1:c5:
94:3d:a9:f8:82:2a:ea:c0:31:db:42:7a:bf:6a:9a:c3:99:1b:
ec:9f:0e:5a:01:d7:f0:04:62:b3:ac:b4:ac:8b:a9:2e:b7:f3:
ed:e1:0f:c6:48:ab:61:b9:b5:bd:d1:d3:0e:05:39:fd:83:60:
75:9a:68:35:02:6e:29:3a:1b:70:b3:1a:e6:09:ae:92:86:7c:
48:e2:1f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:10:53 2026 by rpki-client